This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
File:                     NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json)
Hash identifier:          EXzKQG3VknDOVvw3MavPZsXXoIaaqKW2oVyWKVqQmtY=
Subject key identifier:   58:A3:07:D9:CC:53:FD:77:90:22:D0:32:1B:6C:B2:FF:A7:9B:79:00
Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D
Certificate issuer:       /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
Certificate serial:       0E83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
Manifest number:          0E79
Signing time:             Sat 24 Jan 2026 17:24:17 +0000
Manifest this update:     Sat 24 Jan 2026 17:24:17 +0000
Manifest next update:     Sat 31 Jan 2026 17:24:17 +0000
Files and hashes:         1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: OQ2OLrbojmRHZ1pIFCsyWX2XkPoo0cwjGdBmBxjYgpI=)
                          2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: 6nYEOZbY+riA9hipBBLAA8A7cOGQEYjhf5EbPaoNkaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl
                          rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3715 (0xe83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192491, serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D
        Validity
            Not Before: Jan 24 17:24:17 2026 GMT
            Not After : Jan 31 17:24:17 2026 GMT
        Subject: CN=69750041-3c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:58:28:c2:82:2e:b3:be:30:82:af:ff:3e:
                    4d:d1:51:20:ec:1b:b6:fe:46:10:39:69:c7:72:cc:
                    eb:b1:cb:e0:05:8b:50:23:e1:5f:84:dc:83:15:1e:
                    27:7f:e1:07:ad:e7:2b:3b:72:0d:02:e3:ac:25:9e:
                    2f:42:2d:ae:a4:61:63:64:14:f5:6b:ec:fc:c5:f1:
                    62:79:4d:5c:86:2f:fa:98:99:de:bf:8f:be:bd:87:
                    11:c5:23:b2:98:e5:dc:16:e2:81:c0:4b:cc:22:c6:
                    68:62:ab:bd:78:f7:97:ee:de:43:f1:c4:32:96:4b:
                    d1:47:b1:46:83:81:0a:13:6d:64:0e:82:8b:0e:5f:
                    c2:e4:5f:a9:a9:7e:3c:e8:90:49:7a:c8:08:64:85:
                    fd:5a:2d:d0:93:8c:b4:78:b9:0b:92:ba:14:1b:c6:
                    7b:1a:98:57:90:cd:6e:77:b6:12:f8:79:26:56:68:
                    87:24:1b:31:b4:ab:9c:62:c2:1a:57:1a:05:b8:ea:
                    d7:9d:77:c5:6f:54:0c:9e:9b:3f:e3:fd:2c:b7:1e:
                    98:13:fc:8a:d6:62:ab:22:7d:9e:df:a0:b0:de:b4:
                    e2:43:aa:c7:24:d0:f0:6c:71:bc:de:74:da:9d:c6:
                    66:c8:e1:66:e8:23:ab:db:2a:f5:80:fc:24:ac:9a:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A3:07:D9:CC:53:FD:77:90:22:D0:32:1B:6C:B2:FF:A7:9B:79:00
            X509v3 Authority Key Identifier:
                keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:95:4c:c3:b7:d1:1b:b9:70:d8:72:84:f8:2f:e1:91:1b:
         73:57:5a:32:86:d6:9d:85:62:76:12:64:e5:85:83:e6:2c:3a:
         27:c0:83:af:a2:b5:9d:99:3f:cb:7c:db:33:87:eb:c8:05:0f:
         2e:b7:1e:c8:42:ec:5a:0a:11:9a:a6:3e:1a:31:72:5c:10:2b:
         ed:ad:b1:d0:d2:bd:95:8c:f5:7d:7f:8c:5a:b1:ae:d7:78:27:
         11:95:42:8d:c7:2d:d3:b1:4a:a9:4e:dc:b0:c4:64:6d:06:f6:
         5e:ef:dd:fd:7c:ac:40:ca:88:68:d7:d8:5f:f7:91:cf:6f:d2:
         55:8d:ec:7a:34:a6:d6:66:2c:0f:82:28:c4:04:19:92:49:bf:
         b0:78:57:de:31:e8:1b:45:42:e0:dd:de:35:1d:36:a7:e7:90:
         4e:77:83:d8:e5:f9:bb:4d:07:94:d7:54:ba:d4:ba:25:cd:13:
         f7:77:13:cd:ae:e7:6a:00:41:f4:e9:96:50:45:ff:52:5e:ea:
         78:1c:b9:79:fc:12:b8:e8:33:96:69:39:39:b2:14:2c:ad:e1:
         0e:98:71:33:d4:01:42:24:f0:45:61:ba:35:5c:f3:b6:67:54:
         10:2f:99:c6:1f:c6:e5:20:13:95:c7:fe:1d:ff:9b:92:c4:f8:
         bc:33:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:54 2026 by rpki-client